US20170132684A1

Movatterモバイル変換

Info

Publication number: US20170132684A1
Application number: US15/347,919
Authority: US
Inventors: Mikko Tuomas Korkalo
Original assignee: Rrc Networks Oy
Current assignee: Rrc Networks Oy
Priority date: 2015-11-10
Filing date: 2016-11-10
Publication date: 2017-05-11
Also published as: US10878472B2

Abstract

Disclosed is a method and system for managing a service associated with a service provider. The method comprises receiving from at least one classification provider, request for registration as classifying authority with a platform, wherein the platform is associated with a digital store, approving the received request for registration of the at least one classification provider, classifying the service and/or the service provider by the registered at least one classification provider to generate classification information pertaining to the service and/or the service provider, and hosting the classified service by the platform. The system comprises a computing device associated with a platform provider, at least one device associated with at least one classification provider registered as a classification authority with the platform to classify the service and/or the service provider, and a service provider device associated with the service provider of the classified service.

Description

TECHNICAL FIELD

The present disclosure relates generally to distribution of services; and more specifically, to a method and system for managing a service associated with a service provider.

BACKGROUND

Nowadays, use of digital stores or marketplaces for distribution of services (or products) is rapidly increasing. Typically, such services are distributed between service providers and customers via advertisements and/or listings at such digital stores. For example, there exist distinct digital application stores for distribution of applications designed to run on different operating systems. Examples of such applications include, but are not limited to schedulers, navigators, photo editors, games, calculators, and music editors. Generally, such digital stores are “open markets” and are unregulated. Therefore, any entity (individual or enterprise) offering services may enlist as a service provider with such digital stores

In recent times, there has been an increase in presence of malicious services available at such digital stores. For example, malicious applications may be present at a digital application store and such malicious applications may publish malware (such as computer viruses, worms, and so forth) in the digital application store. With increase in number of service providers and such digital stores, identification of genuine services versus malicious services is becoming difficult. Conventional techniques for managing services available at such digital stores include auditing and verifying legitimacy of all services listed at such digital stores. However, such conventional techniques are time consuming, and are often inefficient in distinguishing between genuine services and malicious services.

Therefore, in light of the foregoing discussion, there exists a need to overcome the aforementioned drawbacks associated with conventional techniques for administering services available across digital stores.

SUMMARY

The present disclosure seeks to provide a method for managing a service associated with a service provider. The present disclosure also seeks to provide a system for managing a service associated with a service provider. The present disclosure seeks to provide a solution to the existing problem of identifying presence of malicious services at a digital application store. An aim of the present disclosure is to provide a solution that overcomes at least partially the problems encountered in prior art, and provides a reliable solution for distinguishing between genuine services and the malicious services.

Further disclosure is related to making all kinds of classifications possible. An example case and need is for enabling control by clients (eg. Corporations) to allow for example audited software to be installed on end user devices. Additionally managing security is enabled by disclosure point as well as increasing security and providing security controls. Disclosure is further related to allowing customer to choose whom to trust instead of trusting blindly the platform provider is also a major factor of benefit of this technology.

In one aspect, an embodiment of the present disclosure provides a method for managing a service associated with a service provider, the method comprising:

- receiving from at least one classification provider, request for registration as classifying authority with a platform, wherein the platform is associated with a digital store;
- approving the received request for registration of the at least one classification provider;
- classifying the service and/or the service provider by the registered at least one classification provider to generate classification information pertaining to the service and/or the service provider; and
- hosting the classification information by the platform.

In another aspect, an embodiment of the present disclosure provides a system for managing a service associated with a service provider, the system comprising:

- a computing device associated with a platform provider, wherein the computing device is operable to implement a platform associated with a digital store;
- at least one device associated with at least one classification provider registered as a classification authority with the platform to classify the service and/or the service provider, wherein the at least one device is communicably coupled to the computing device via a network; and
- a service provider device associated with the service provider of the classified service, wherein the service provider device is communicably coupled to the computing device via the network.

Embodiments of the present disclosure substantially eliminate or at least partially address the aforementioned problems in the prior art, and enables reliable management of a service associated with a service provider.

Additional aspects, advantages, features and objects of the present disclosure would be made apparent from the drawings and the detailed description of the illustrative embodiments construed in conjunction with the appended claims that follow.

It will be appreciated that features of the present disclosure are susceptible to being combined in various combinations without departing from the scope of the present disclosure as defined by the appended claims.

BRIEF DESCRIPTION OF THE DRAWINGS

The summary above, as well as the following detailed description of illustrative embodiments, is better understood when read in conjunction with the appended drawings. For the purpose of illustrating the present disclosure, exemplary constructions of the disclosure are shown in the drawings. However, the present disclosure is not limited to specific methods and instrumentalities disclosed herein. Moreover, those in the art will understand that the drawings are not to scale. Wherever possible, like elements have been indicated by identical numbers.

Embodiments of the present disclosure will now be described, by way of example only, with reference to the following diagrams wherein:

FIG. 1 is a schematic illustration of a system for managing a service associated with a service provider, in accordance with an embodiment of the present disclosure;

FIG. 2 is an illustration of operational steps of the system for managing the service associated with the service provider, in accordance with an embodiment of the present disclosure; and

FIG. 3 is an illustration of steps of a method for managing a service associated with a service provider, in accordance with an embodiment of the present disclosure.

In the accompanying drawings, an underlined number is employed to represent an item over which the underlined number is positioned or an item to which the underlined number is adjacent. A non-underlined number relates to an item identified by a line linking the non-underlined number to the item. When a number is non-underlined and accompanied by an associated arrow, the non-underlined number is used to identify a general item at which the arrow is pointing.

DETAILED DESCRIPTION OF EMBODIMENTS

The following detailed description illustrates embodiments of the present disclosure and ways in which they can be implemented. Although some modes of carrying out the present disclosure have been disclosed, those skilled in the art would recognize that other embodiments for carrying out or practicing the present disclosure are also possible.

The present disclosure provides a method and a system for managing a service associated with a service provider. The described method is easy to implement and efficient in distinguishing between genuine services and malicious services available at digital stores. Further, the described system for implementation of the method is inexpensive and robust. The method and system of the present disclosure also include measures to facilitate safe data transmissions and payments pertaining to management of the service between the platform provider, the at least one classification provider, the service provider, and the customer.

In an embodiment, the term ‘service’ used herein relates to tangible services (or products) such as personal care products, consumer durables, household supplies, software applications, toys, and so forth. Further, the term ‘service’ also relates to intangible services such as cleaning services, repairing or renovation services, electronic equipment installation services, and so forth. According to an embodiment of the present disclosure, the term ‘service’ relates to digital applications (such as event schedulers, photo editors, games, and so forth) designed to run on suitable (or compatible) equipment. Specifically, such services may be distributed to customers by service providers by offering such services via digital stores or marketplaces (such as e-commerce and application stores “app stores”).

According to an embodiment, the term ‘service provider’ used herein relates to an entity having expertise in providing the service associated therewith. Specifically, the service provider may include an individual, a group of individuals, or an enterprise offering the service to customers via a platform associated with a digital store.

In an embodiment, the platform may be hardware, software, firmware or a combination of these, suitable for hosting/maintaining/storing/providing the classification information related to the service offered by the service provider at the digital store (such as a digital application store). Specifically, the platform may be utilised for hosting multiple services offered by multiple service providers. For example, a service provider A may offer three services and a service provider B may offer eight services for distribution to customers via the platform. Therefore, it may be evident that the platform provider may be an entity (such as an individual, an enterprise, and so forth) providing the platform for distribution of the service. Further the platform might be used to host other services such as e-commerce service in conjunction with hosting and maintaining classification information.

The method for managing the service associated with the service provider comprises receiving from at least one classification provider, request for registration as classifying authority with the platform, wherein the platform is associated with the digital store. Specifically, the request for registration as classifying authority may include certificate signing requests from the at least one classification provider to a platform provider. More specifically, the certificate signing requests may be a request for obtaining a classification certificate from the platform provider. It may be evident that a signed classification certificate issued by the platform provider to the at least one classification authority authenticates the at least one classification provider as a trusted classification authority with the platform. Further managing the service can be understood to managing and creating service classification information. Further the managing the service can be understood as managing the platform over which the classification provided offers the services.

In an embodiment, the at least one classification provider may be an entity possessing credentials suitable for registration as classifying authority with the platform. Specifically, the at least one classification provider may be a trusted third party for classifying the service offered by the service provider.

For example, a certificate signing request from a classification provider X may be received by the platform provider. In such example, the classification provider X, requesting signed classification certificates from the platform provider, may generate a key pair comprising a private key and a public key of the classification provider X. In such example, the private key and the public key may be Rivest-Shamir-Adleman (RSA) keys. Further, the certificate signing request may include information pertaining to the classification provider X (such as identity and credentials thereof), and public key of the classification provider X for approval by the platform provider.

In an embodiment, the classification certificates for the at least one classification provider may be cryptographically verifiable. Specifically, such classification certificates may be electronic documents, for example, ITU-T standard X.509 certificates that may be digitally signed using a private key of the platform provider (issuer of the classification certificate). Thereafter, the digital certificate may be verified (or authenticated) using a public certificate (or public key) of the platform provider. Optionally, the classification certificates for the at least one classification provider may be valid for a pre-determined time period, for example, 5 years. More optionally, the validity of such classification certificates may be extended upon successful verification of credentials of the at least one classification provider, before end of the pre-determined time period.

According to an embodiment, the at least one classification provider may make a payment to the platform provider to obtain the classification certificates.

It may be evident that upon approval of the received request for registration of the at least one classification provider, the at least one classification provider registers as classifying authority with the platform. As classifying authority, the at least one classification provider may be authorised to classify the service associated with the service provider.

Thereafter, the method comprises classifying the service and/or the service provider by the registered at least one classification provider to generate classification information pertaining to the service and/or the service provider. Specifically, the service and/or the service provider may be classified according to criteria such as, commonly used business metrics, prevalent certifications, rating on a scale of numbers, historical data, security related metrics, reliability and so forth. It may be evident that the service provider requests the registered at least one classification provider for classification of the service and/or the service provider via the platform. Further, the service and/or the service provider may be classified only if information/credentials pertaining thereto are verified to be genuine and satisfactory by the registered at least one classification provider.

For example, the service provider may be classified according to historical data. In such instance, examples of the historical data include, but are not limited to, popularity of services offered by the service provider in the past, number of services offered by the service provider in the past, and past feedback of customers related to post-transaction assistance offered by the service provider. It may be evident that positive historical data in favour of the service provider may facilitate classification of the service provider.

In an example, the service may be classified according to commonly used business metrics. In such instance, the business metrics may include, but are not limited to, projected revenue generation capability of the service, estimated number of customers that may order the service, and so forth.

Further, the service may be classified by a Classification Provider that provides security auditing of the service. For example, a security audit may prove that a specific kind of security testing has been performed to the classified version of a software product in an application store.

Optionally, the service may be classified according to rating on a scale of 1 to 10. For example, the rating may be determined according to popularity of similar services in the digital store, specifications of the service, ease of implementation of the service, and so forth. In an example, a service P may be rated (or classified) equal to ‘8’ if the service P offers more features and a user friendly interface as compared to a service Q with rating equal to ‘5’.

In another embodiment, the service and/or the service provider may be classified according to customized classifications specified by the customers (or any other end user such as business entities).

As described previously, classifying the service and/or the service provider by the registered at least one classification provider generates classification information pertaining to the service and/or the service provider. In an embodiment, the classification information pertaining to the service and/or the service provider may be in form of a digital certificate for example, ITU-T standard X.509 certificate. Specifically, the digital certificate may comprise granted classification of the service and/or the service provider. Optionally, the digital certificate may also include public key of the registered at least one classification provider and/or the service provider. According to an embodiment, the classification information pertaining to the service and/or the service provider may be cryptographically verifiable. Specifically, the classification information may be encrypted by the registered at least one classification provider and a digital signature thereof may be attached to the classification information. Verification can be done by verifying the signature (of classification information signed with private key) with the public key.

Further or alternatively the classification provider can be enabled/allowed to sell the classification information and allow decryption of encrypted signatures, that would normally be public and freely available. The preference of using encrypted in comparison to plain signatures is dependent on the business model and does not have necessarily implications in security. Encryption and decryption of the signature is optional in any other way. If Classification Provider is selling its services to Service Providers giving guarantees described above in the document, it would be preferred to publish the signatures for public. This would allow anyone to see and use the classification information provided for example in search criteria. If Classification Provider is selling its services to the end users or clients of the Service Provider it would be preferable to encrypt the Classification Information and provide the decryption keys for profit to other clients/buyers of classification information from said provider. This might allow Classification Provider to limit the use of classification information from other than parties intended.

Thereafter, the method comprises hosting the classified service by the platform. Specifically, the service provider may request the platform provider to host the classified service on the platform. In an embodiment, the classified service may be advertised by the service provider for distribution to customers via the platform. It may be evident that following classification of the service and/or the service provider by the registered at least one classification provider, the service may be understood to be a ‘classified service’. In an example, the term ‘classified service’ relates to the service classified by the registered at least one classification provider. In another example, ‘classified service’ also relates to the service associated with the classified service provider. It may be evident that the service provider may offer multiple services. Therefore, obtaining classification of the service provider may be a more suitable alternative as compared to obtaining classification of each of the multiple services. In such instance, the multiple services offered by the classified service provider may be understood to be ‘classified services’. Further classifying a service versus classifying a service provider might be different. A service provider might be classified by for example business metrics or following practices described in ISO certifications. Thus certified claim will differ in the case of certifying the Service Provider and when certifying the Service itself. Certifying Service Provider might not have direct relation to for example penetration testing or other software auditing done by outside party to each of the published versions of the software in an application store. Additionally embodiments enable to require (as a client) for a specific certification from a specific Certification Provider to allow the end user to install an application from an application store. This might be beneficial to increase safety of purchasing.

In an embodiment, the method may further comprise making a payment to the at least one classification provider to obtain the classification information pertaining to the service and/or the service provider. Specifically, the service provider may make the payment to the at least one classification provider via the platform.

In an embodiment, the method may further comprise receiving selection of the classified service from a customer. Specifically, the customer may be an entity, such as an individual or enterprise, interested in obtaining (or receiving) the classified service via the platform. Further, the selection of the classified service may depend on requirements of the customer. In an example, a customer C1 may require that the classified service may possess a classification Y. In another example, a customer C2 may require that the service provider of the classified service may possess a classification Z. In yet another example, a customer C3 may require that the classified service may possess the classification Y, and the service provider of such classified service may possess the classification Z.

In such embodiment, the method may further comprise transmitting the classification information pertaining to the selected classified service to the customer. Specifically, the platform provider may obtain the classification information from the service provider for transmission to the customer. Further, the method may comprise receiving verification of the transmitted classification information from the customer. Specifically, the customer may authenticate the digital signature attached to the classification information by using the public key of the registered at least one classification provider, private key of the customer, and decrypting the classification information. Upon successful verification of the transmitted classification information, the customer may notify the platform provider. Thereafter, the method may comprise instructing the service provider associated with the selected classified service, to provide the selected classified service to the customer. Specifically, service provider may be instructed (or notified) via the platform, following which, the service provider provides the selected classified service to the customer. Further the classification information can be either public or encrypted for access limitation.

Optionally, the method may further comprise making a payment to the service provider to receive the classified service. Specifically, the customer may make the payment via the platform to the service provider. It may be evident that the service provider may provide the classified service to the customer only upon receiving such payment.

According to an embodiment, the method may further comprise classifying the platform provider associated with the platform to generate classification information pertaining to the platform provider. Specifically, the platform provider may be classified by the at least one classification provider. In another embodiment, the method may further comprise classifying the customer to generate classification information pertaining to the customer.

A computing device associated with a platform provider is operable to implement the platform associated with the digital store. In an embodiment, the computing device may include hardware, software, firmware, or a combination of these suitable for implementing the platform. Examples of the computing device include, but are not limited to, servers, cloud service, desktop computers and laptop computers etc. According to an embodiment, the computing device associated with the platform provider may include a memory unit to store classification information pertaining to the service and/or the service provider. Optionally, the memory unit may also store classification information pertaining to the platform provider and/or the customer.

Further, at least one device is associated with at least one classification provider registered as a classification authority with the platform to classify the service, wherein the at least one device is communicably coupled to the computing device via a network. In an embodiment, the at least one device associated with the registered at least one classification provider may include hardware, software, firmware, or a combination of these, suitable for classifying the service and/or the service provider. Examples of the at least one device include, but are not limited to, computers and laptops. Further, the at least one device may also be suitable for communicating with at least one of the platform provider, the service provider, and the customer via the network. Examples of the network, include, but are not limited to Internet, cellular network, and radio network.

Optionally, security level of the network may be audited by either a third party auditor or the platform provider to ensure a prescribed standard of security of the network. Specifically, a high security level of the network may facilitate safety of data transmissions and payments pertaining to management of the service between the platform provider, the at least one classification provider, the service provider, and the customer. In an example, Hyper Text Transfer Protocol Secure (HTTPS) protocol may be utilised for securing communication in the network.

Further, a service provider device is associated with the service provider of the classified service. The service provider device is communicably coupled to the computing device via the network. In an embodiment, the service provider device may include hardware, software, firmware, or a combination of these, suitable for communicating with the at least one classification provider and the customer via the platform, and providing the service to the customer. Examples of the service provider device include, but are not limited to, servers, cloud service, desktop computers, tablet computers, laptops, and smartphones.

In an embodiment, the system may further comprise a customer device associated with a customer selecting the classified service, wherein the customer device is communicably coupled to the computing device via the network. In an embodiment, the customer device may include hardware, software, firmware, or a combination of these, suitable for viewing the classified services hosted by the platform, selecting the classified service, verifying the classification information of the selected classified service, and optionally, making the payment to the service provider to receive the classified service. Examples of the customer device include, but are not limited to, desktop computers, tablet computers, laptops, and smartphones.

Additionally/alternatively: According to embodiments an additional field of business to the digital store is disclosed: providing certifications for service providers, users and other certification providers. Embodiments provide end-to-end cryptographic verification of certified publishers and service providers. In said embodiment there is no direct man in the middle attack vector on the digital store implementation. I.e. customer can choose to trust a specific Certification Provider, mitigating Man-In-The-Middle attacks against the Platform Provider.

As a further example related to signing of a certification information

- Step 1S: Calculate hash (i.e. SHA256) from data
- Step 2S. Encrypt hash with signer's private key (i.e. RSA 2048 bit key)

Example technical method of verifying the certification information:

- Step 1V. Calculate hash (i.e. SHA256) from message data, excluding the signature part
- Step 2V. Decrypt signature (encrypted hash) using signer's public key (i.e. RSA 2048 bit key)
- Step 3V. Compare calculated hash and decrypted signature, if they are different, signature is not valid.

DETAILED DESCRIPTION OF THE DRAWINGS

Referring toFIG. 1, illustrated is a schematic illustration of asystem100 for managing a service associated with a service provider, in accordance with an embodiment of the present disclosure. Thesystem100 comprises acomputing device102 associated with a platform provider, 1st and

2nd devices

104 and106 associated with 1st and 2nd classification providers respectively, and aservice provider device108 associated with a service provider of a classified service. As shown, the 1st and

2nd devices

104 and106 and theservice provider device108 are communicably coupled to thecomputing device102 via anetwork110. Thecomputing device102 is operable to implement a platform associated with a digital store. The 1st and 2nd classification providers are registered as a classification authority with the platform to classify the service and/or the service provider. Further, thesystem100 also comprises a customer device112, associated with a customer selecting the classified service. The customer device112 may be communicably coupled to thecomputing device102 via thenetwork110

The steps1 to13 are only illustrative and other alternatives can also be provided where one or more steps are added, one or more steps are removed, or one or more steps are provided in a different sequence without departing from the scope of the claims herein.

Referring toFIG. 3, illustrated are the steps of amethod300 for managing a service associated with a service provider, in accordance with an embodiment of the present disclosure. Atstep302, a request for registration as classifying authority with a platform is received from at least one classification provider, wherein the platform is associated with a digital store. Atstep304, the received request for registration of the at least one classification provider is approved. Atstep306, the service and/or the service provider is classified by the registered at least one classification provider to generate classification information pertaining to the service and/or the service provider. Atstep308, the classified service is hosted by the platform. Further/as an example the classification information can be a cryptographically verifiable certificate.

Thesteps302 to308 are only illustrative and other alternatives can also be provided where one or more steps are added, one or more steps are removed, or one or more steps are provided in a different sequence without departing from the scope of the claims herein. For example, themethod300 may further comprise receiving selection of the classified service from a customer, transmitting the classification information pertaining to the selected classified service to the customer, receiving verification of the transmitted classification information from the customer, and instructing the service provider associated with the selected classified service, to provide the selected classified service to the customer. Optionally, themethod300 may comprise making a payment to the at least one classification provider to obtain the classification information pertaining to the service and/or the service provider. In an example, inmethod300 approving the received request for registration of the at least one classification provider may further comprise validating credentials of the at least one classification provider and providing classification certificates for the at least one classification provider. In themethod300, classification certificates for the at least one classification provider may be cryptographically verifiable. Optionally, inmethod300 the classification information pertaining to the service and/or the service provider may be in form of a digital certificate. Further, inmethod300 the classification information pertaining to the service and/or the service provider may be cryptographically verifiable. Optionally themethod300 may further comprise classifying a platform provider associated with the platform to generate classification information pertaining to the platform provider. More optionally, themethod300 may comprise classifying the customer to generate classification information pertaining to the customer

Modifications to embodiments of the present disclosure described in the foregoing are possible without departing from the scope of the present disclosure as defined by the accompanying claims. Expressions such as “including”, “comprising”, “incorporating”, “have”, “is” used to describe and claim the present disclosure are intended to be construed in a non-exclusive manner, namely allowing for items, components or elements not explicitly described also to be present. Reference to the singular is also to be construed to relate to the plural.